← 返回 Skills 市场
ZKE Exchange Trading Skill
作者
ZKE-Exchange
· GitHub ↗
· v1.0.13
· MIT-0
202
总下载
0
收藏
0
当前安装
14
版本数
在 OpenClaw 中安装
/install zke-trading
功能描述
ZKE AI Master Trader (Official). Control spot and futures trading, manage assets, and access real-time market data on ZKE Exchange.
安全使用建议
This package appears to implement exactly what it says (trading, transfers, withdrawals, market data). Before installing: (1) Verify the publisher/repository links (homepage and GitHub) and confirm the code origin. (2) Create API keys limited to Read/Trade only (disable Withdrawals) and enable IP whitelisting — do not supply a withdrawal-enabled key unless you explicitly trust the source. (3) Review package.json and requirements.txt for third-party dependencies you don't expect. (4) Run the installer in an isolated environment (container or VM) and inspect the built plugin before enabling in production. (5) Consider disabling autonomous model invocation for this skill or require manual confirmation for any action that moves funds. If you want higher assurance, ask the maintainer for a signed release or official distribution channel and/or perform an independent code audit of the included files.
功能分析
Type: OpenClaw Skill
Name: zke-trading
Version: 1.0.13
The bundle is a comprehensive trading integration for the ZKE Exchange, providing tools for spot, futures, and margin trading, as well as asset management. It follows standard security practices by utilizing environment variables (ZKE_API_KEY, ZKE_SECRET_KEY) for authentication and includes explicit instructions in SKILL.md for the AI agent to require user confirmation before executing any financial transactions. The implementation uses a standard Python/TypeScript bridge via the Model Context Protocol (MCP), and the code (main.py, mcp_server.py) is well-structured, lacks obfuscation, and contains no evidence of data exfiltration or unauthorized execution.
能力评估
Purpose & Capability
Name/description request ZKE API keys and the bundle contains Python and TypeScript code that implements spot/futures trading, transfers, withdrawals, and WebSocket market data. Requiring python3 and npm is consistent with the provided Python runtime and local TypeScript bridge.
Instruction Scope
SKILL.md instructs running the provided install_openclaw_plugin.sh and setting ZKE_API_KEY/ZKE_SECRET_KEY only. The README claim 'does not generate or use local plaintext configuration files' is mostly true for credentials (they come from env vars), but the installer creates a local virtualenv (.venv) and compiles/installs the plugin locally; the runtime code exposes many trading/withdrawal operations via MCP tools.
Install Mechanism
No external arbitrary binary downloads; installer runs npm install/build and pip install from requirements.txt and registers the plugin via the openclaw CLI. This is expected but causes network pulls of npm/pip packages (normal but should be reviewed). The install script also requires the host to have the openclaw CLI available.
Credentials
Only ZKE_API_KEY and ZKE_SECRET_KEY are required which is proportionate for an exchange integration. However the code includes withdrawal and transfer functionality — so API keys with withdrawal permission would allow asset movement. SKILL.md itself recommends disabling withdrawals and using IP whitelisting; that advice should be followed.
Persistence & Privilege
always:false (no forced always-on). The skill exposes MCP tools (mcp.tool) that the agent can invoke (disable-model-invocation is false by default), which is normal for skills. Consider whether you want the agent to be allowed to autonomously invoke trading/withdrawal actions.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zke-trading - 安装完成后，直接呼叫该 Skill 的名称或使用
/zke-trading触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.13
- Updated to version 1.0.13.
- Improved metadata format and added homepage and emoji for better discoverability.
- Updated configuration to clarify required environment variables and host dependencies.
- Removed the old skill.json file for a cleaner setup.
- Documentation now highlights key features and provides direct resource links.
v1.0.12
- Introduced official OpenClaw (MCP) plugin implementation for ZKE Exchange trading.
- Added secure installation script and TypeScript/Python bridge for local execution.
- Enforced strict API credential handling via environment variables (no plaintext config).
- Expanded documentation for security architecture, setup, and best practices.
- Added new tools for spot, futures, account, wallet, and transfer management.
v1.0.11
- Simplified the skill by replacing the content with concise usage guidelines focused on rule enforcement for ZKE Exchange tools and symbol formatting.
- Removed 41 files, including all plugin source code, installer scripts, and supporting documentation.
- Updated usage instructions and best practices in SKILL.md, emphasizing critical parameters and symbol formats.
- Retained only the SKILL.md file with a new focus on tool usage, parameter quirks, and capability summary.
- Streamlined installation, setup, and security documentation to prioritize proper tool interaction.
v1.0.10
- **Metadata & Provenance Aligned:** Completely resolved "Registry Mismatch" warnings. Unified `skill.json`, `openclaw.plugin.json`, and `package.json` to explicitly declare `ZKE_API_KEY` and `ZKE_SECRET_KEY` requirements, and added the official ZKE Exchange homepage.
- **Zero Plaintext Storage:** Eliminated local credential storage risks. Completely purged `config.json` generation and read-logic from the installer, `main.py`, and `mcp_server.py`. The plugin now strictly enforces standard MCP environment variables for all authentication.
- **Supply-Chain & Installer Secured:** Removed remote `git clone` commands and hardcoded absolute paths from the install script. The installer is now a purely local, verifiable build tool that does not alter global host permissions.
v1.0.9
- **Security Compliance:** Completely removed local `config.json` generation and usage from all entry points (`main.py`, `mcp_server.py`, and the installer).
- **Authentication:** Enforced strict adherence to MCP standards by relying exclusively on `ZKE_API_KEY` and `ZKE_SECRET_KEY` environment variables.
- **Installer Cleanup:** Removed remote `git clone` commands; the installer is now a purely local, verifiable build tool.
- **Documentation:** Consolidated metadata to resolve previous Registry Mismatches and updated `SKILL.md` to reflect a zero-plaintext-storage security model.
v1.0.8
- Enforced stricter security: removed support for local plaintext configuration files; credentials are only accepted via environment variables.
- Updated documentation to clarify withdrawal API access risks and the need for IP whitelisting.
- Improved installation instructions, highlighting local-only builds and secure environment configuration.
- Added new example for internal asset transfer commands in the Magic Prompts section.
- Refined tags and updated display information for clarity.
v1.0.7
- **Security & Compliance:** Removed remote execution scripts and `git clone` from the installer to ensure a fully local, verifiable build process.
- **Authentication Alignment:** Upgraded Python SDK (`main.py`) to natively prioritize environment variables (`ZKE_API_KEY`, `ZKE_SECRET_KEY`), fully aligning runtime behavior with registry metadata and MCP standards.
- **Privilege Management:** Removed instructions and script actions that modified OpenClaw global permissions (`gateway.mode local`, `tools.profile = full`), enforcing a Strict Least Privilege model.
- **Documentation:** Consolidated setup guides into a unified, compliant `SKILL.md` and removed conflicting README files to resolve "Registry Mismatch" and "Inconsistency" warnings.
v1.0.6
- Documentation files and examples have been removed for a more streamlined distribution.
- SKILL.md now includes improved security instructions and a Transparency Report for credential storage.
- Installation guide updated to focus on the automated install process using the provided script.
- Configuration now supports both environment variables and a local config file.
- Magic prompt examples revised for clarity and direct use.
v1.0.5
zke-trading v1.0.5
- Updated documentation with a new SKILL.md featuring improved installation guides and security information.
- Added skill.json for enhanced skill metadata.
- Removed install.sh to streamline installation options.
- Enhanced clarity on credential handling and recommended security practices.
v1.0.4
ZKE Trading Skill 1.0.4 Changelog
- Updated SKILL.md to a new metadata format, including slug, display name, version, tags, and attributes.
- Extended documentation with environment variable setup instructions and sample prompts.
- Added official resource links (website, guide, GitHub) and licensing info.
- Security and privacy notes have been improved for clarity.
- No code or file changes in this release.
v1.0.3
zke-trading v1.0.3
- Initial public release with complete source code and professional setup scripts.
- Added secure, local-first trading functions for ZKE Exchange integration via OpenClaw (MCP) protocol.
- Included Pro-grade install script for automated environment configuration and dependency management.
- All logic and credentials remain local with support for IP restriction and clear security recommendations.
- Provided extensive documentation, sample prompts, and manual setup guides.
v1.0.2
ZKE Trading Skill v1.0.2 Changelog
- Clarified and updated security guidance, emphasizing required IP Whitelisting for API access and strong recommendations for withdrawal permissions.
- Improved configuration instructions with explicit requirements for setting API keys as environment variables.
- Enhanced installation section: split into clear automated (one-click) and manual setup instructions.
- Expanded and clarified example Magic Prompts for easier onboarding.
- Updated official resource links and streamlined documentation for accuracy and clarity.
v1.0.1
- Expanded documentation highlighting local-only key storage and privacy guarantees.
- New section detailing automated and manual installation processes, including step-by-step agent integration and environment variable setup.
- Clarified installer behavior and security features, emphasizing auditability and zero cloud exposure.
- Updated and organized quick-start prompts and links to official resources.
- License and development attribution added for transparency.
v1.0.0
Initial release of ZKE Trading Skill for OpenClaw.
元数据
常见问题
ZKE Exchange Trading Skill 是什么？
ZKE AI Master Trader (Official). Control spot and futures trading, manage assets, and access real-time market data on ZKE Exchange. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 202 次。
如何安装 ZKE Exchange Trading Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zke-trading」即可一键安装，无需额外配置。
ZKE Exchange Trading Skill 是免费的吗？
是的，ZKE Exchange Trading Skill 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
ZKE Exchange Trading Skill 支持哪些平台？
ZKE Exchange Trading Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 ZKE Exchange Trading Skill？
由 ZKE-Exchange（@zke-exchange）开发并维护，当前版本 v1.0.13。
推荐 Skills